← back to Watches
public/privacy-policy.html
498 lines
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Privacy Policy - Omega Watch Price History</title>
<style>
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
line-height: 1.6;
color: #333;
background: #f5f5f5;
}
.container {
max-width: 900px;
margin: 0 auto;
padding: 20px;
background: white;
box-shadow: 0 2px 4px rgba(0,0,0,0.1);
}
header {
background: #1a1a1a;
color: white;
padding: 30px 20px;
text-align: center;
}
h1 {
font-size: 2.5em;
margin-bottom: 10px;
}
.subtitle {
color: #ccc;
font-size: 1.1em;
}
.content {
padding: 40px 20px;
}
h2 {
color: #c60c2e;
margin-top: 30px;
margin-bottom: 15px;
font-size: 1.8em;
border-bottom: 2px solid #c60c2e;
padding-bottom: 5px;
}
h3 {
color: #333;
margin-top: 25px;
margin-bottom: 10px;
font-size: 1.3em;
}
p {
margin-bottom: 15px;
text-align: justify;
}
ul, ol {
margin-left: 30px;
margin-bottom: 20px;
}
li {
margin-bottom: 8px;
}
.highlight-box {
background: #f8f9fa;
border-left: 4px solid #c60c2e;
padding: 20px;
margin: 20px 0;
}
.info-box {
background: #e7f3ff;
border: 1px solid #0066cc;
border-radius: 4px;
padding: 15px;
margin: 20px 0;
}
.warning-box {
background: #fff3cd;
border: 1px solid #ffc107;
border-radius: 4px;
padding: 15px;
margin: 20px 0;
}
table {
width: 100%;
border-collapse: collapse;
margin: 20px 0;
}
th, td {
border: 1px solid #ddd;
padding: 12px;
text-align: left;
}
th {
background: #c60c2e;
color: white;
}
tr:nth-child(even) {
background: #f8f9fa;
}
.button {
display: inline-block;
background: #c60c2e;
color: white;
padding: 12px 24px;
text-decoration: none;
border-radius: 4px;
margin: 10px 5px;
transition: background 0.3s;
}
.button:hover {
background: #a00a24;
}
.button-secondary {
background: #6c757d;
}
.button-secondary:hover {
background: #5a6268;
}
footer {
background: #1a1a1a;
color: white;
text-align: center;
padding: 20px;
margin-top: 40px;
}
.last-updated {
color: #666;
font-style: italic;
margin-bottom: 20px;
}
.contact-info {
background: #f8f9fa;
padding: 20px;
border-radius: 4px;
margin: 20px 0;
}
@media (max-width: 768px) {
h1 {
font-size: 2em;
}
h2 {
font-size: 1.5em;
}
.container {
padding: 10px;
}
.content {
padding: 20px 10px;
}
}
</style>
</head>
<body>
<header>
<h1>Privacy Policy</h1>
<div class="subtitle">Omega Watch Price History Platform</div>
</header>
<div class="container">
<div class="content">
<p class="last-updated">
<strong>Last Updated:</strong> <span id="lastUpdated"></span><br>
<strong>Version:</strong> 1.0<br>
<strong>Effective Date:</strong> January 1, 2024
</p>
<div class="highlight-box">
<p><strong>Your Privacy Matters:</strong> We are committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.</p>
</div>
<h2>1. Data Controller</h2>
<div class="contact-info">
<p><strong>Data Controller:</strong> Omega Watch Price History Platform</p>
<p><strong>Contact:</strong> privacy@omegawatches.local</p>
<p><strong>Server Location:</strong> 45.61.58.125:7600</p>
</div>
<h2>2. Information We Collect</h2>
<h3>2.1 Technical Data (Automatically Collected)</h3>
<ul>
<li><strong>IP Address:</strong> Anonymized (last octet removed) for security and analytics</li>
<li><strong>Browser Type:</strong> User agent string for compatibility</li>
<li><strong>Device Information:</strong> Device type and operating system</li>
<li><strong>Usage Data:</strong> Pages viewed, time on site, interaction patterns</li>
<li><strong>Cookies:</strong> See Cookie Policy below</li>
</ul>
<h3>2.2 Personal Data You Provide</h3>
<ul>
<li><strong>Watchlist Preferences:</strong> Watches you save to your watchlist</li>
<li><strong>Search Queries:</strong> Watch searches and filters you use</li>
<li><strong>Cookie Preferences:</strong> Your consent choices</li>
</ul>
<h3>2.3 Legal Basis for Processing</h3>
<table>
<thead>
<tr>
<th>Data Type</th>
<th>Purpose</th>
<th>Legal Basis</th>
<th>Retention Period</th>
</tr>
</thead>
<tbody>
<tr>
<td>Technical Data</td>
<td>Service functionality & security</td>
<td>Legitimate Interest (Art. 6(1)(f) GDPR)</td>
<td>90 days</td>
</tr>
<tr>
<td>Usage Data</td>
<td>Analytics & improvement</td>
<td>Consent (Art. 6(1)(a) GDPR)</td>
<td>1 year with consent</td>
</tr>
<tr>
<td>Watchlist Data</td>
<td>Personalized experience</td>
<td>Consent (Art. 6(1)(a) GDPR)</td>
<td>1 year with consent</td>
</tr>
<tr>
<td>Security Logs</td>
<td>Fraud prevention & security</td>
<td>Legitimate Interest (Art. 6(1)(f) GDPR)</td>
<td>90 days</td>
</tr>
</tbody>
</table>
<h2>3. Cookie Policy</h2>
<h3>3.1 Essential Cookies (Cannot Be Disabled)</h3>
<div class="info-box">
<p><strong>Purpose:</strong> These cookies are strictly necessary for the website to function properly.</p>
<ul>
<li><strong>Session Cookie:</strong> Maintains your session across pages</li>
<li><strong>Security Token:</strong> Prevents cross-site request forgery attacks</li>
</ul>
<p><strong>Retention:</strong> Session duration or 24 hours</p>
</div>
<h3>3.2 Analytics Cookies (Optional - Requires Consent)</h3>
<div class="info-box">
<p><strong>Purpose:</strong> Help us understand how visitors use the website.</p>
<ul>
<li><strong>Page Views:</strong> Track which pages are most popular</li>
<li><strong>User Journey:</strong> Understand navigation patterns</li>
<li><strong>Performance:</strong> Monitor site speed and errors</li>
</ul>
<p><strong>Retention:</strong> 1 year (with consent)</p>
</div>
<h3>3.3 Preference Cookies (Optional - Requires Consent)</h3>
<div class="info-box">
<p><strong>Purpose:</strong> Remember your settings and preferences.</p>
<ul>
<li><strong>Dark Mode:</strong> Your theme preference</li>
<li><strong>View Settings:</strong> Your preferred layout and filters</li>
</ul>
<p><strong>Retention:</strong> 2 years (with consent)</p>
</div>
<h2>4. Your Rights Under GDPR</h2>
<div class="highlight-box">
<h3>You Have the Following Rights:</h3>
<ol>
<li><strong>Right to Access (Art. 15 GDPR)</strong>
<ul>
<li>Request a copy of all personal data we hold about you</li>
<li>Available at: <code>GET /api/gdpr/data-request/:userId</code></li>
</ul>
</li>
<li><strong>Right to Rectification (Art. 16 GDPR)</strong>
<ul>
<li>Correct inaccurate or incomplete personal data</li>
</ul>
</li>
<li><strong>Right to Erasure (Art. 17 GDPR)</strong>
<ul>
<li>Request deletion of all your personal data</li>
<li>Available at: <code>DELETE /api/gdpr/data-deletion/:userId</code></li>
</ul>
</li>
<li><strong>Right to Restriction (Art. 18 GDPR)</strong>
<ul>
<li>Restrict how we process your data</li>
</ul>
</li>
<li><strong>Right to Data Portability (Art. 20 GDPR)</strong>
<ul>
<li>Receive your data in machine-readable format (JSON)</li>
</ul>
</li>
<li><strong>Right to Object (Art. 21 GDPR)</strong>
<ul>
<li>Object to processing based on legitimate interests</li>
</ul>
</li>
<li><strong>Right to Withdraw Consent (Art. 7(3) GDPR)</strong>
<ul>
<li>Withdraw consent at any time</li>
</ul>
</li>
</ol>
</div>
<div style="text-align: center; margin: 30px 0;">
<a href="/api/gdpr/data-request/YOUR_USER_ID" class="button">Request My Data</a>
<a href="/api/gdpr/consent" class="button button-secondary">Manage Cookie Preferences</a>
</div>
<h2>5. How We Use Your Data</h2>
<h3>5.1 Service Functionality</h3>
<ul>
<li>Display watch prices and historical data</li>
<li>Save your watchlist preferences</li>
<li>Remember your settings</li>
<li>Provide personalized recommendations</li>
</ul>
<h3>5.2 Security & Fraud Prevention</h3>
<ul>
<li>Detect and prevent malicious activity</li>
<li>Rate limiting to prevent abuse</li>
<li>Security monitoring and logging</li>
<li>Protect against DDoS attacks</li>
</ul>
<h3>5.3 Analytics & Improvement (With Consent)</h3>
<ul>
<li>Understand which watches are most popular</li>
<li>Improve site performance and user experience</li>
<li>Identify and fix bugs</li>
<li>Develop new features</li>
</ul>
<h2>6. Data Sharing & Third Parties</h2>
<div class="warning-box">
<p><strong>Important:</strong> We do NOT sell your personal data to third parties.</p>
</div>
<p>We may share data with:</p>
<ul>
<li><strong>Service Providers:</strong> Hosting, analytics (only with consent)</li>
<li><strong>Legal Requirements:</strong> When required by law or court order</li>
<li><strong>Security Threats:</strong> To protect against fraud or security threats</li>
</ul>
<h2>7. Data Retention</h2>
<table>
<thead>
<tr>
<th>Data Type</th>
<th>Retention Period</th>
<th>Reason</th>
</tr>
</thead>
<tbody>
<tr>
<td>View Counts</td>
<td>90 days</td>
<td>Trending analysis</td>
</tr>
<tr>
<td>Watchlists</td>
<td>365 days</td>
<td>User convenience</td>
</tr>
<tr>
<td>Security Logs</td>
<td>90 days</td>
<td>Security investigation</td>
</tr>
<tr>
<td>User Preferences</td>
<td>730 days (2 years)</td>
<td>Long-term preferences</td>
</tr>
<tr>
<td>Anonymous Analytics</td>
<td>30 days</td>
<td>Short-term insights</td>
</tr>
</tbody>
</table>
<p>Data is automatically deleted after the retention period expires.</p>
<h2>8. Security Measures</h2>
<div class="info-box">
<h3>Enterprise-Grade Security:</h3>
<ul>
<li><strong>Encryption:</strong> Data encrypted in transit (HTTPS/TLS)</li>
<li><strong>Rate Limiting:</strong> Protection against brute force attacks</li>
<li><strong>Input Validation:</strong> All inputs sanitized to prevent XSS/injection</li>
<li><strong>Security Headers:</strong> CSP, HSTS, X-Frame-Options, etc.</li>
<li><strong>Authentication:</strong> JWT-based authentication for sensitive endpoints</li>
<li><strong>Monitoring:</strong> 24/7 security event logging</li>
<li><strong>Regular Updates:</strong> Security patches applied promptly</li>
</ul>
</div>
<h2>9. International Data Transfers</h2>
<p>Our servers are located at IP address 45.61.58.125. If you access our website from outside the server's jurisdiction, please be aware that your data will be transferred to and processed on our servers.</p>
<h2>10. Children's Privacy</h2>
<p>Our service is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.</p>
<h2>11. Changes to This Policy</h2>
<p>We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the new policy.</p>
<h2>12. Contact & Data Protection Officer</h2>
<div class="contact-info">
<p><strong>Data Protection Officer:</strong> privacy@omegawatches.local</p>
<p><strong>Privacy Inquiries:</strong> Contact us for any questions about your data</p>
<p><strong>Supervisory Authority:</strong> You have the right to lodge a complaint with your local data protection authority</p>
<p><strong>Response Time:</strong> We will respond to all requests within 30 days as required by GDPR</p>
</div>
<h2>13. API & Technical Implementation</h2>
<div class="info-box">
<h3>For Developers:</h3>
<p>Our GDPR-compliant API endpoints:</p>
<ul>
<li><code>GET /api/privacy-policy</code> - Machine-readable privacy policy</li>
<li><code>POST /api/gdpr/consent</code> - Update cookie consent</li>
<li><code>GET /api/gdpr/data-request/:userId</code> - Request personal data</li>
<li><code>DELETE /api/gdpr/data-deletion/:userId</code> - Delete personal data</li>
</ul>
<p>Full API documentation: <a href="/api/docs">/api/docs</a></p>
</div>
<div style="text-align: center; margin: 40px 0;">
<a href="/" class="button">Return to Home</a>
<a href="/api/docs" class="button button-secondary">API Documentation</a>
</div>
</div>
</div>
<footer>
<p>© 2024 Omega Watch Price History Platform</p>
<p>GDPR Compliant | Enterprise Security | Educational Purpose</p>
</footer>
<script>
// Set last updated date dynamically
document.getElementById('lastUpdated').textContent = new Date().toLocaleDateString('en-US', {
year: 'numeric',
month: 'long',
day: 'numeric'
});
</script>
</body>
</html>